Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/272363FA0A1511F09C351C56762E951A.roa
File: 272363FA0A1511F09C351C56762E951A.roa (raw, json)
Hash identifier: t4cNHHr66mpP2OL0gMNH2zXwt5HWf9oEa1Yy+D5bXEM=
Subject key identifier: EC:9E:C6:A1:3A:49:53:3B:FD:82:7B:2C:FA:03:C6:A6:17:75:2F:BD
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 088A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/272363FA0A1511F09C351C56762E951A.roa
Signing time: Wed 26 Mar 2025 07:37:22 +0000
ROA not before: Wed 26 Mar 2025 07:37:18 +0000
ROA not after: Thu 26 Mar 2026 07:37:18 +0000
asID: 4766
IP address blocks: 102.135.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:37:18 2025 GMT
Not After : Mar 26 07:37:18 2026 GMT
Subject: CN=67e3aeb1-9f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:e9:da:19:47:fd:50:41:ee:68:78:7b:89:
7e:ab:59:9c:a2:41:64:f0:31:a0:3d:00:a6:a5:be:
fe:31:50:78:c3:85:10:6e:d3:f6:79:f8:b1:d1:3f:
37:cc:1b:15:64:87:4b:53:96:3d:9a:c3:67:35:3c:
62:46:7e:96:04:a8:c3:6c:85:83:93:b9:69:04:90:
66:81:a1:61:34:66:d0:d7:63:d5:7c:eb:29:69:15:
e7:c4:17:09:f7:33:02:5b:8e:1b:99:f8:c1:29:4f:
c1:bc:6e:81:95:f8:3d:05:31:6d:bd:c2:19:71:0a:
b2:c9:56:74:a9:fd:95:9b:00:e4:f6:ab:81:2d:94:
ea:76:09:09:21:e4:3e:41:81:56:e0:49:62:e4:56:
f2:dc:72:35:08:42:0d:f3:39:fe:d5:ac:f1:8e:cd:
bb:42:79:14:38:1a:83:d3:33:c0:74:72:73:f3:22:
c3:f7:f7:c3:9c:d2:aa:30:dc:e2:4f:5c:dc:7c:1d:
c8:ad:57:0b:23:8e:f7:c9:a5:6f:fe:c5:93:c6:55:
0c:94:ea:41:74:67:0f:69:23:38:97:2f:a5:52:fb:
47:53:60:e0:1b:93:d4:b1:b8:f7:bc:f2:6e:01:1a:
ab:9d:af:38:11:2c:7a:83:92:d6:2c:7b:23:0e:3c:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:C6:A1:3A:49:53:3B:FD:82:7B:2C:FA:03:C6:A6:17:75:2F:BD
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/272363FA0A1511F09C351C56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.95.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ed:4b:0d:7f:57:38:b0:2f:8a:47:35:65:aa:a5:c0:fb:40:
5d:c1:25:40:6b:17:f2:93:4c:42:bb:4b:28:c8:5f:8f:10:c7:
3e:62:e0:9e:bb:3e:51:05:c3:aa:50:c7:d4:72:90:ac:52:87:
46:d6:5c:ba:40:f1:37:2d:0b:79:26:7f:22:e1:b0:cf:45:35:
9d:51:06:ce:f3:06:a7:da:9d:85:9f:ec:16:68:50:37:84:e0:
bb:90:ed:f9:d9:90:cc:aa:84:86:5a:64:16:c0:2e:95:ac:b2:
cf:e2:a1:18:78:6b:24:a0:36:be:79:80:ba:74:98:8a:d3:c7:
d8:27:c6:f5:9e:bb:6f:e1:48:87:51:f6:b7:3b:b0:ae:e1:c5:
8d:ae:ab:bc:13:94:9c:bd:00:bb:23:4e:ed:23:1d:cf:3a:1b:
ca:12:52:0a:c7:75:80:ff:cf:cf:18:35:3e:8e:83:a9:fa:4c:
47:96:53:80:58:b3:b9:3b:49:fa:9c:48:dc:03:46:3d:a6:6f:
b1:74:e0:6e:73:81:5f:a5:52:2f:eb:6f:67:92:bb:55:82:96:
2d:f6:26:0a:2f:5f:17:73:31:be:50:e9:e7:24:b1:df:fc:88:
a6:42:71:39:27:c9:0a:ef:fd:38:79:42:b9:b7:bc:1e:87:19:
bb:3f:cc:45
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCIowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjYwNzM3MThaFw0yNjAzMjYwNzM3MThaMBgxFjAU
BgNVBAMTDTY3ZTNhZWIxLTlmMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcPenaGUf9UEHuaHh7iX6rWZyiQWTwMaA9AKalvv4xUHjDhRBu0/Z5+LHR
PzfMGxVkh0tTlj2aw2c1PGJGfpYEqMNshYOTuWkEkGaBoWE0ZtDXY9V86ylpFefE
Fwn3MwJbjhuZ+MEpT8G8boGV+D0FMW29whlxCrLJVnSp/ZWbAOT2q4EtlOp2CQkh
5D5BgVbgSWLkVvLccjUIQg3zOf7VrPGOzbtCeRQ4GoPTM8B0cnPzIsP398Oc0qow
3OJPXNx8HcitVwsjjvfJpW/+xZPGVQyU6kF0Zw9pIziXL6VS+0dTYOAbk9SxuPe8
8m4BGqudrzgRLHqDktYseyMOPMBvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7J7G
oTpJUzv9gnss+gPGphd1L70wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzI3MjM2M0ZBMEExNTExRjA5QzM1MUM1Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh18wDQYJKoZIhvcNAQEL
BQADggEBAJftSw1/VziwL4pHNWWqpcD7QF3BJUBrF/KTTEK7SyjIX48Qxz5i4J67
PlEFw6pQx9RykKxSh0bWXLpA8TctC3kmfyLhsM9FNZ1RBs7zBqfanYWf7BZoUDeE
4LuQ7fnZkMyqhIZaZBbALpWsss/ioRh4aySgNr55gLp0mIrTx9gnxvWeu2/hSIdR
9rc7sK7hxY2uq7wTlJy9ALsjTu0jHc86G8oSUgrHdYD/z88YNT6Og6n6TEeWU4BY
s7k7SfqcSNwDRj2mb7F04G5zgV+lUi/rb2eSu1WCli32JgovXxdzMb5Q6ecksd/8
iKZCcTknyQrv/Th5Qrm3vB6HGbs/zEU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:35 2025 by rpki-client